Specialist I, Cybersecurity

AL-AYUNI Investment and Contracting Company; Riyadh; On-site; SAR 240,000 - 480,000; Full time

Job summary

AL-AYUNI Investment and Contracting Company in Riyadh seeks a Senior Specialist, Cybersecurity to design, implement, operate, and improve advanced security solutions protecting IT infrastructure, applications, and data in cloud and on-prem environments.

The role requires 5–8 years of experience, strong expertise in security engineering, threat detection, incident response, and regulatory compliance with ECC and PDPL, and the ability to lead projects and mentor junior staff.

Qualifications

• Must have 5–8 years in cybersecurity or security engineering.
• Experience with risk assessments and audits.
• Strong communication and mentoring skills.

Responsibilities

• Lead design and operation of cybersecurity solutions across on-prem and cloud.
• Manage and optimize security tools, rules, and configurations.
• Perform vulnerability management and penetration testing activities.
• Lead incident response, containment, eradication, and lessons learned.
• Ensure compliance with ECC, PDPL, and other regulatory requirements.
• Provide technical guidance and mentorship to junior staff.
• Collaborate with IT and business teams to deliver secure solutions.

Skills

Cybersecurity engineering

Threat detection

Vulnerability management

Security architecture

Incident response

Compliance & regulations

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM

IDS/IPS

EDR/XDR

PAM

DLP

Job description

The Senior Specialist, Cybersecurity is responsible for leading the design, implementation, operation, and continuous improvement of advanced cybersecurity solutions to protect the organization's IT infrastructure, applications, cloud environments, and information assets. The role provides senior technical expertise in cybersecurity engineering, threat detection, vulnerability management, security architecture, and incident response while ensuring compliance with regulatory requirements and industry best practices, including NCA Cybersecurity Controls and PDPL.

Key Responsibilities

Cybersecurity Engineering & Operations

• Lead the design, implementation, configuration, and maintenance of cybersecurity solutions, including Firewalls, IDS/IPS, SIEM, EDR/XDR, DLP, IAM, PAM, and security monitoring platforms.
• Develop and enhance security architecture to protect enterprise networks, systems, applications, and cloud environments.
• Manage and optimize security tools, policies, rules, and configurations to improve threat detection and prevention capabilities.
• Perform advanced security assessments, vulnerability management, and penetration testing activities.
• Analyze security alerts, investigate incidents, perform root cause analysis, and coordinate remediation activities.
• Develop security hardening standards and ensure secure configuration of systems and infrastructure.
• Lead security reviews for new technologies, applications, vendors, and third-party integrations.
• Support implementation of security controls across on‑premises and cloud environments.
• Monitor emerging cybersecurity threats, vulnerabilities, and attack techniques.
• Lead incident response activities, including investigation, containment, eradication, and lessons learned.
• Perform threat analysis and recommend improvements to the organization's security posture.
• Maintain and improve SIEM detection rules, correlation logic, and security use cases.
• Ensure cybersecurity controls align with NCA Essential Cybersecurity Controls (ECC), PDPL, and applicable regulatory requirements.
• Support internal and external cybersecurity audits by providing technical evidence and documentation.
• Conduct risk assessments and recommend security improvements.
• Maintain cybersecurity policies, procedures, standards, and technical documentation.
• Support compliance reporting and security maturity improvement initiatives.

Technical Leadership

• Provide technical guidance and mentorship to junior cybersecurity team members.
• Lead cybersecurity projects and ensure successful implementation of security solutions.
• Evaluate new cybersecurity technologies and recommend suitable solutions.
• Collaborate with IT infrastructure, application development, and business teams to ensure secure technology delivery.

Qualifications

Education:

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field.

Experience

• 5–8 years of relevant experience in cybersecurity, information security, security engineering, or cyber operations.